Is that a problem? I guess they could have put a "technical details:" in front of it, to make that clearer, but it has to be in that e-mail (otherwise the techies complain) and isn't really something they can explain in a useful way there.

Then you would be fine with the standard boilerplate "your data is secure with us"?

I'm happy they say this.. now i'd like some sort of proof :-)

Better would be "We securely[1] store your passwords"

blah blah...We take your privacy very seriously...blah blah...

[1] Technically, we use bcrypt with a random salt.

An argument could be made to take this a step further and not even go into buzzword details at all, and leave it with boilerplate words.

Security is hard. Describing security is even harder.

I'm for transparency in security for review, but you can achieve the same via a 3rd party audit.

Just my 2c.

Googling bcrypt should do the trick and most people know how to do that. </sarcasm>

Sure. I get your point. Just asking if YOU specifically needed the explanation, which I'm sure a number of folks would be happy to provide.